239
Oxygen 1.0.2 Release with Stagefright security patches

  1. jzmoreno
    Eclair Aug 15, 2015

    jzmoreno , Aug 15, 2015 :
    can you just download the zip directly to the phone and flash using twrp - yes, but wipe cache, dalvik and system. DO NOT wipe data to preserve your files. You may need to reflash supersu as well
     

  2. olihoude
    Donut Aug 15, 2015

    olihoude , Aug 15, 2015 :
    Thanks !
    But... Why no OTA ?

     

  3. bharathiesec
    Cupcake Aug 15, 2015

    bharathiesec , Aug 15, 2015 :
    hi
    Here's an OxygenOS 1.0.2 update for your OnePlus One containing patches for the recent "Stagefright" security exploit. "Stagefright" is basically a vulnerability in the multimedia stack that can be exploited via MMS which could compromise your phone. If you are currently using OxygenOS, I would highly recommend upgrading to this version for your own safety.

    Again, before flashing, please backup all your data just to be safe.

    https://s3.amazonaws.com/oxygenos.oneplus.net/ONE_12_A.01_150813.zip
    https://s3.amazonaws.com/oxygenos.oneplus.net/ONE_12_A.01_150813.zip.md5

    If you are already on OxygenOS, this update does not require a reset.

    For detailed installation guide, you can find it here
    https://forums.oneplus.net/threads/oxygenos-is-here-installation-guide.289398/
     

  4. jzmoreno
    Eclair Aug 15, 2015

    jzmoreno , Aug 15, 2015 :
    flash 1.0.2 (no need to falsh 1.0.1 - i didnt). But unfortunately this 1.0.2 patch remains vulnerable after the latest update of the Stagefright detector app. So best to wait for another patch (1.0.3???) from OP.
    Me, I flashed 1.0.2 last night, set-up my phone to my previous settings, deleted google apps, etc and then after discovering that despite the patch the phone remains vulnerable, i reverted to AICP (latest update addressed the vulnerabilty). But, I'm still hopeful that OP will address this (i really prefer Oxygen as I get the best cellular signals with Oxygen)
     

  5. wintermi
    Eclair Aug 15, 2015

    wintermi , Aug 15, 2015 :
    Thanks. Missed that when I was going through the thread.
     

    bkbkjbb likes this.
  6. bumeshrai
    Froyo Aug 15, 2015


  7. jitin20
    Eclair Aug 15, 2015

    jitin20 , Aug 15, 2015 :
    Why is time zon set to china Shanghai. How to change it to global?
    Version in build.prop is still 1.0.0 why?
     

  8. Thingist
    Gingerbread Aug 15, 2015

    Thingist , Aug 15, 2015 :
    I was referring to this post on the cyanogenmod blog, which was referred to by an user named q888999, and if one bothers to read it, it most definitely is about CyanogenMod, not Cyanogen OS. One would expect to find information about the latter from cyngn.com, not cyanogenmod.org. Not that cyngn.com is very useful in that regard. The few scraps of information about the possibly upcoming update are to be found on Twitter.

    The "promises" from Cyanogen, Inc. about Cyanogen OS 12.1 have been more vague, and shifting with time. The latest relevant tweets from their twitter account refer to August in general. Most annoyingly they have failed to address the stagefright vulnerability issue altogether, whereas other manufacturers have at least verbally committed themselves to a monthly security update schedule.

    Therefore, if one is concerned about the risks posed by recently uncovered vulnerabilities, it makes sense to switch to e.g. CM nightlies, which are patched very quickly.
     

  9. mfshamsi
    Gingerbread Aug 15, 2015

    mfshamsi , Aug 15, 2015 :
    That was quite a (pot)shot, or a nice straight 'swipe'. Gosh my plastic is burning...
     

  10. rswheaton
    Honeycomb Aug 15, 2015

    rswheaton , Aug 15, 2015 :

    Just tried... failed. I am guessing you have to unpack the zip file?
     

  11. rocstarmohit
    Honeycomb Aug 15, 2015

    rocstarmohit , Aug 15, 2015 :
    what to do stuck with extracting the package twrp?
     

  12. muhtar
    Eclair Aug 15, 2015

    muhtar , Aug 15, 2015 :
    It's OK. I Was on Exodus Rom for couple of days recently. And to be honest battery wasn't that good as I expected. Was even worse than what I'm used to. Now I'm back on Oxygen, version 1.0.2
     

  13. jzmoreno
    Eclair Aug 15, 2015

    jzmoreno , Aug 15, 2015 :
    hmmm...i didn't extract the zip file. I just flashed it as is. Did you check the md5?
     

  14. rswheaton
    Honeycomb Aug 15, 2015

    rswheaton , Aug 15, 2015 :
    What do you mean check the Md5 do I also need to download that file?
     

  15. EvertW
    Donut Aug 15, 2015

  16. eswar.valluri
    Cupcake Aug 15, 2015

    eswar.valluri , Aug 15, 2015 :
    Helen, why an OTA can not be setup? Why should we flash the whole ROM even for small fixes?
     

  17. jzmoreno
    Eclair Aug 15, 2015

    jzmoreno , Aug 15, 2015 :
    an md5 check will verify the download of the zip file - if its all good. You can download md5 checkers from the net, like this: http://winmd5.com/
    This is the md5 of the zip file:
    9c0e1cbee76880a4b36ba44f5071062e
     

  18. rswheaton
    Honeycomb Aug 15, 2015

    rswheaton , Aug 15, 2015 :

    So your saying maybe my download was bad? I can try to download it again...
     

  19. gringoboy
    Lollipop Aug 15, 2015

    gringoboy , Aug 15, 2015 :
    Lol. You are wrong. Cyanogen is the only official OS for the OPO. Oxygen is not official. It is for the OP2. For the OPO it is entirely optional, and that is why it's not OTA.
     

  20. gringoboy
    Lollipop Aug 15, 2015

    gringoboy , Aug 15, 2015 :
    Why do you call it quick? It's months! Apple would have patched it in 2 days max. Don't thank people for providing really crappy service.
     

    kamrul likes this.